Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier: R16L8QNyMGTHafCGbbEIV4IQGv8wo0yvj14Ok4ilKvY=
Subject key identifier: 8C:35:20:E1:E5:1C:62:23:ED:FE:15:A2:A6:93:68:0C:76:4F:34:C6
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial: 019FA184329EBAD746230929807669DE296D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number: 19CB
Signing time: Mon 27 Jul 2026 03:00:23 +0000
Manifest this update: Mon 27 Jul 2026 03:00:23 +0000
Manifest next update: Tue 28 Jul 2026 03:00:23 +0000
Files and hashes: 1: KqbQhkdZxzpCNnx1oWr4fisphrk.roa (hash: Wd6NpR+WA7JLVkZVqwEuj4FqkYVnQ8Ba2vJsRl6/8ck=)
2: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: pEqCrlw2I1QxmByUgizyBlWrGCdspkyv714Vds6I5HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:32:9e:ba:d7:46:23:09:29:80:76:69:de:29:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
Validity
Not Before: Jul 27 03:00:23 2026 GMT
Not After : Jul 28 03:00:23 2026 GMT
Subject: CN=8c3520e1e51c6223edfe15a2a693680c764f34c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:7e:c3:bb:90:d3:8e:e8:aa:5f:e6:0e:90:
95:d5:ae:79:1d:ea:e8:24:f4:e3:38:7e:b2:37:29:
26:9c:31:25:11:df:b0:be:97:e3:f9:12:36:ae:56:
34:2d:20:d4:cc:b6:d1:fc:6e:13:b1:b2:f2:c4:e5:
73:68:9d:a2:5b:0e:ae:17:64:4d:b9:4d:df:4b:87:
f0:e5:30:06:16:37:d7:b4:c2:89:a8:8b:35:ff:8e:
3a:ba:fc:c7:32:4c:15:f1:45:64:70:aa:38:0f:18:
74:f1:e1:ef:80:f8:2e:4b:dd:b5:03:d6:1d:8f:23:
ed:ce:b7:ab:37:ff:2d:f8:54:e3:a5:e1:3c:6d:5c:
85:18:59:69:89:20:14:1d:63:01:30:93:0b:25:78:
51:1b:20:af:58:96:fe:8f:d3:9c:ef:eb:4e:e7:23:
66:0e:5d:a9:46:2c:83:84:47:37:71:fa:72:e8:d6:
56:81:c3:a9:45:57:14:73:49:0b:06:c2:02:d4:0a:
35:63:61:41:2c:0b:cd:0d:38:08:ea:ae:40:5c:a4:
08:d3:c7:be:69:7a:8e:03:08:43:d9:70:1e:5d:12:
10:91:6b:3a:09:1e:67:23:1a:4b:dd:d6:b0:1d:be:
57:6e:e8:64:e4:b2:cf:7c:95:ab:8e:f4:a8:97:16:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:35:20:E1:E5:1C:62:23:ED:FE:15:A2:A6:93:68:0C:76:4F:34:C6
X509v3 Authority Key Identifier:
keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:51:34:2b:22:f1:74:57:6d:c7:bc:8a:fe:18:41:ea:65:2c:
16:8f:b4:2e:43:27:70:54:2d:b7:4a:1b:12:50:47:42:d7:31:
c9:67:df:ae:03:6e:50:21:1e:36:c7:68:67:99:d6:87:0d:cd:
22:45:46:fb:0f:2a:f2:c5:28:4a:d9:ef:45:ee:66:3a:08:95:
82:ec:2c:c3:83:ed:73:f5:16:30:10:f4:79:bb:f4:49:d7:fc:
ed:3a:b9:ee:25:f9:a2:20:5f:c1:c7:30:d9:84:1a:c6:51:01:
63:6a:ba:32:54:d9:71:47:25:5a:08:52:bc:db:6b:c9:34:4a:
2c:7f:38:5c:b5:49:f3:41:36:e6:4c:8b:45:e7:d8:1c:61:34:
58:4b:68:57:6d:3c:ae:e5:1e:37:bc:99:1b:0b:a9:66:71:07:
bf:1e:6b:4d:6d:fd:20:98:c2:77:05:62:73:5f:fa:88:ba:b1:
c7:0f:98:9a:07:ef:3f:10:74:19:62:18:e7:d7:bf:1e:3b:92:
55:b3:50:aa:6b:f3:9f:a1:51:e1:9f:ee:b4:55:68:d5:bd:70:
15:f2:4d:1d:42:a6:5d:94:20:56:3f:29:e3:ba:a3:0c:96:98:
ab:1b:52:8d:a1:17:7b:ec:d8:fe:2d:cb:ad:3d:dc:7e:b9:ac:
e1:2a:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:06:16 2026 by rpki-client